XSS in Recruit Dokodemo Rikunabi 2013
CVE-2012-1240
Cross-site scripting (XSS) vulnerability in the RECRUIT Dokodemo Rikunabi 2013 extension before 1.0.1 for Google Chrome allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.020 (78.3th percentile) — read the EPSS interpretation.
Affected products
- Recruit Dokodemo_rikunabi_2013
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_SECUNIA, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_MISC)
- vultures@jpcert.or.jp (vdb-entry, x_refsource_BID)
- vultures@jpcert.or.jp (vdb-entry, x_refsource_XF)
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)